General

  • Target

    5b6e97947a142e9e770248fed3c7c22b392e3879a2d4e43aa5e63f8b6cdf57c5

  • Size

    363KB

  • MD5

    ee1381c364bf2201d922b70c8ba9ea24

  • SHA1

    f2ded708b97981abac433ead7723a21c8b767f98

  • SHA256

    5b6e97947a142e9e770248fed3c7c22b392e3879a2d4e43aa5e63f8b6cdf57c5

  • SHA512

    0bc4d9bd4c4018bab42faa8c38094fa566df652acb9008827bbf608e001b9058aa314c903a8f94653ed6b4843ff92fc89d8c3e66271d608899bc700d70795f2c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5b6e97947a142e9e770248fed3c7c22b392e3879a2d4e43aa5e63f8b6cdf57c5
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections